# CVEs published 2012-05-24

33 CVEs were published on May 24, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-2517](https://cve.now/CVE-2011-2517.md): Multiple buffer overflows in net/wireless/nl80211.c in the Linux kernel before 2.6.39.2 allow local users to gain privileges by leveraging t (no CVSS)
- [CVE-2011-2518](https://cve.now/CVE-2011-2518.md): The tomoyo\_mount\_acl function in security/tomoyo/mount.c in the Linux kernel before 2.6.39.2 calls the kern\_path function with arguments tak (no CVSS)
- [CVE-2011-2521](https://cve.now/CVE-2011-2521.md): The x86\_assign\_hw\_event function in arch/x86/kernel/cpu/perf\_event.c in the Performance Events subsystem in the Linux kernel before 2.6.39 d (no CVSS)
- [CVE-2011-2699](https://cve.now/CVE-2011-2699.md): The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, whi (no CVSS)
- [CVE-2011-2707](https://cve.now/CVE-2011-2707.md): The ptrace\_setxregs function in arch/xtensa/kernel/ptrace.c in the Linux kernel before 3.1 does not validate user-space pointers, which allo (no CVSS)
- [CVE-2011-2898](https://cve.now/CVE-2011-2898.md): net/packet/af\_packet.c in the Linux kernel before 2.6.39.3 does not properly restrict user-space access to certain packet data structures as (no CVSS)
- [CVE-2011-2918](https://cve.now/CVE-2011-2918.md): The Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event overflows associated with PERF\_COUNT\_SW\_CPU\_C (no CVSS)
- [CVE-2011-3188](https://cve.now/CVE-2011-3188.md): The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragm (no CVSS)
- [CVE-2011-3191](https://cve.now/CVE-2011-3191.md): Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to caus (no CVSS)
- [CVE-2011-3353](https://cve.now/CVE-2011-3353.md): Buffer overflow in the fuse\_notify\_inval\_entry function in fs/fuse/dev.c in the Linux kernel before 3.1 allows local users to cause a denial (no CVSS)
- [CVE-2011-3359](https://cve.now/CVE-2011-3359.md): The dma\_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which al (no CVSS)
- [CVE-2011-3363](https://cve.now/CVE-2011-3363.md): The setup\_cifs\_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remot (no CVSS)
- [CVE-2011-4080](https://cve.now/CVE-2011-4080.md): The sysrq\_sysctl\_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP\_SYS\_ADMIN capability to modi (no CVSS)
- [CVE-2011-4081](https://cve.now/CVE-2011-4081.md): crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or (no CVSS)
- [CVE-2011-3103](https://cve.now/CVE-2011-3103.md): Google V8, as used in Google Chrome before 19.0.1084.52, does not properly perform garbage collection, which allows remote attackers to caus (no CVSS)
- [CVE-2011-3104](https://cve.now/CVE-2011-3104.md): Skia, as used in Google Chrome before 19.0.1084.52, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecifie (no CVSS)
- [CVE-2011-3105](https://cve.now/CVE-2011-3105.md): Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 19.0.1084.52 allows remote attackers (no CVSS)
- [CVE-2011-3106](https://cve.now/CVE-2011-3106.md): The WebSockets implementation in Google Chrome before 19.0.1084.52 does not properly handle use of SSL, which allows remote attackers to exe (no CVSS)
- [CVE-2011-3107](https://cve.now/CVE-2011-3107.md): Google Chrome before 19.0.1084.52 does not properly implement JavaScript bindings for plug-ins, which allows remote attackers to cause a den (no CVSS)
- [CVE-2011-3108](https://cve.now/CVE-2011-3108.md): Use-after-free vulnerability in Google Chrome before 19.0.1084.52 allows remote attackers to execute arbitrary code via vectors related to t (no CVSS)
- [CVE-2011-3109](https://cve.now/CVE-2011-3109.md): Google Chrome before 19.0.1084.52 on Linux does not properly perform a cast of an unspecified variable, which allows remote attackers to cau (no CVSS)
- [CVE-2011-3110](https://cve.now/CVE-2011-3110.md): The PDF functionality in Google Chrome before 19.0.1084.52 allows remote attackers to cause a denial of service or possibly have unspecified (no CVSS)
- [CVE-2011-3111](https://cve.now/CVE-2011-3111.md): Google V8, as used in Google Chrome before 19.0.1084.52, allows remote attackers to cause a denial of service (invalid read operation) via u (no CVSS)
- [CVE-2011-3112](https://cve.now/CVE-2011-3112.md): Use-after-free vulnerability in the PDF functionality in Google Chrome before 19.0.1084.52 allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2011-3113](https://cve.now/CVE-2011-3113.md): The PDF functionality in Google Chrome before 19.0.1084.52 does not properly perform a cast of an unspecified variable during handling of co (no CVSS)
- [CVE-2011-3114](https://cve.now/CVE-2011-3114.md): Multiple buffer overflows in the PDF functionality in Google Chrome before 19.0.1084.52 allow remote attackers to cause a denial of service (no CVSS)
- [CVE-2011-3115](https://cve.now/CVE-2011-3115.md): Google V8, as used in Google Chrome before 19.0.1084.52, allows remote attackers to cause a denial of service or possibly have unspecified o (no CVSS)
- [CVE-2012-2042](https://cve.now/CVE-2012-2042.md): Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vec (no CVSS)
- [CVE-2011-2906](https://cve.now/CVE-2011-2906.md): Integer signedness error in the pmcraid\_ioctl\_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow loca (no CVSS)
- [CVE-2011-5090](https://cve.now/CVE-2011-5090.md): GR Board (aka grboard) 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers (no CVSS)
- [CVE-2011-5091](https://cve.now/CVE-2011-5091.md): Multiple SQL injection vulnerabilities in GR Board (aka grboard) 1.8.6.5 Community Edition allow remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2012-1172](https://cve.now/CVE-2012-1172.md): The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid \[ (open square bracket) characters in name (no CVSS)
- [CVE-2012-1821](https://cve.now/CVE-2012-1821.md): The Network Threat Protection module in the Manager component in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.700x on Windows S (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-05-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.